Given the simplicity of this attack and complete disregard for security by the vendor, it is likely to just be a teenager in a basement somewhere